Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/w9q0yZcgIZIULmPQgRbOInwxwPA.roa
File: w9q0yZcgIZIULmPQgRbOInwxwPA.roa (raw, json)
Hash identifier: fGpcu4yyZTnYVWdjo+etSVbLehKcvW9H8y6SqEWr8NU=
Subject key identifier: C3:DA:B4:C9:97:20:21:92:14:2E:63:D0:81:16:CE:22:7C:31:C0:F0
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 1A975076
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/w9q0yZcgIZIULmPQgRbOInwxwPA.roa
Signing time: Sat 01 Jan 2022 09:55:15 +0000
ROA not before: Sat 01 Jan 2022 09:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202013
IP address blocks: 185.153.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446124150 (0x1a975076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 1 09:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3dab4c997202192142e63d08116ce227c31c0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:df:9e:02:7e:00:dc:f5:8a:1e:d5:7d:1f:
4b:47:f0:c0:38:f2:a4:be:bd:9d:d0:3d:ba:ed:99:
1e:bc:68:70:ce:cd:db:e6:d3:9f:ef:2a:cc:2b:3e:
1d:ef:da:36:68:10:66:0b:70:5b:b1:95:94:8e:61:
4c:7b:a8:29:d7:34:de:28:d8:32:52:c3:1e:d9:58:
50:63:9b:17:18:5d:bf:e5:19:d4:52:8a:ad:f2:f1:
9a:16:1d:c8:88:4d:cc:21:cb:a7:d1:ca:07:01:b2:
6d:52:7f:7d:c6:90:83:09:71:1f:3e:02:dc:f8:6f:
07:55:8d:3a:5b:94:b1:d3:07:9e:61:98:21:f0:4f:
c8:d3:0b:53:0d:9b:1d:c0:c9:01:03:34:7a:57:a1:
a7:aa:3a:5f:a6:5b:33:b6:bc:f8:6f:e6:e9:a2:a6:
1f:1b:1a:80:af:43:af:08:72:24:02:00:e2:95:de:
d7:22:22:20:9b:a5:ab:62:7f:0d:0f:91:9c:80:61:
bb:f6:ad:33:2a:d3:c9:ed:df:d9:68:6e:e1:9b:fd:
d9:45:9f:a8:cb:3a:c7:61:7b:6c:5b:b1:2c:90:b2:
65:85:68:0e:58:6e:55:56:fa:27:2a:5a:7e:a0:ff:
98:8a:6e:28:01:ea:19:18:fc:9a:fd:d1:d7:d6:77:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:B4:C9:97:20:21:92:14:2E:63:D0:81:16:CE:22:7C:31:C0:F0
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/w9q0yZcgIZIULmPQgRbOInwxwPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.170.0/24
Signature Algorithm: sha256WithRSAEncryption
04:aa:da:81:31:23:21:ea:23:1c:91:1d:4a:2c:b8:53:2c:7a:
6e:e5:32:09:96:9c:96:4e:df:aa:e8:6f:a8:c4:71:75:da:55:
62:83:55:8a:29:2d:8a:76:d3:4a:8c:e6:54:96:c0:8f:ab:ad:
4e:54:5e:89:df:7c:27:8e:13:ec:42:72:ff:37:c9:9b:74:62:
2f:5f:87:49:bb:7e:83:49:46:4c:ba:7a:e4:1a:9a:4f:e1:f6:
4f:8e:d7:ee:8b:94:10:25:33:06:ca:59:c5:6d:27:52:d9:ac:
83:f4:43:94:b1:0b:6a:da:b2:83:24:a6:4e:3e:eb:53:e4:42:
7f:7e:f0:7c:9d:46:4a:ac:92:77:5d:77:a4:19:c3:f7:0a:38:
70:06:d2:4a:35:d5:53:2b:d2:09:d8:27:30:f1:36:bc:a4:17:
c1:12:1e:0a:0c:1f:45:f9:e3:48:2f:f5:52:02:50:4d:52:c4:
a9:bd:cd:10:d8:4f:4b:7e:c0:9c:5a:48:bb:51:d0:c1:1d:0f:
56:c0:be:e3:46:9c:63:88:11:57:36:21:0e:48:d7:5e:0e:f8:
ad:93:7b:5d:c1:62:1d:b5:b6:27:cc:11:04:c5:89:98:ea:63:
a5:e3:39:89:6a:89:c7:17:fe:24:27:98:03:19:14:56:51:85:
ad:d0:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:57 2024 by rpki-client on console-ams.rpki-client.org